Troubleshooting

CV0-004 · 36 questions

• After a city GIS deploy, a new application image fails on the existing host AMI because it depends on a newer library ABI the old image cannot provide. What is the most likely root cause category?
• A municipal IaC template requests more memory than the selected instance type can provide, and the stack create fails during allocation. What should ops investigate first?
• A county CI/CD pipeline identity cannot create load balancers in the target cloud account, and the deploy stops with authorization errors. What is the primary issue?
• Several municipal workloads share a constrained compute pool; performance collapses when noisy neighbors consume disproportionate capacity. Which deployment issue does this describe?
• During a city records migration, undersized disks fill mid-deploy and the job fails halfway with no free space. What is the most accurate root-cause category?
• A parks department deploy references a machine image family the provider no longer publishes, and instance create fails. What is the likely cause?
• City ops sees either an entire regional control-plane API unavailable or only one municipal microservice returning errors. Why does scoping full versus partial outage matter first?
• Automation creating hundreds of civic resources hits provider API rate limits and mass creates stall with throttling errors. What is the deployment blocker?
• New municipal stacks fail because the account’s public IP quota is exhausted even though templates and IAM look correct. What should ops address?
• A university–city AI pilot chooses a region that does not offer the required GPU SKU, so the deploy cannot place instances. What is the core issue?
• Municipal IaC apply fails because a parameter still points at a retired provider API version that the control plane no longer accepts. What is the best characterization of the failure?
• A county permit system deploy fails with both 'quota exceeded' messages and IAM permission denied errors at the same time. What should the cloud team do first to triage effectively?
• New city GIS worker instances launch successfully but never receive addresses from the cloud subnet's DHCP-equivalent address pool. What is the most likely cause to investigate?
• After a cutover, citizens cannot resolve the municipal portal hostname even though the application servers respond when reached by IP. What should the operations team investigate first?
• Municipal SSO logins start failing with token validation errors after app nodes drifted several minutes away from the identity provider's clock. What is the most appropriate fix?
• Private city subnet instances must download OS updates from the internet. An internet gateway exists in the VPC, yet private instances still cannot reach update endpoints. What is most likely missing or misconfigured?
• During a county API deploy, clients receive HTTP 502 and 503 responses while health checks flap. How should the team interpret these status codes relative to application logic bugs?
• A city department's large file transfers between regions crawl even though CPU on both ends is mostly idle. Engineers suspect path MTU problems or thin links. What troubleshooting focus best matches the symptoms?
• Citizen traffic to a municipal app drops after a new cloud security appliance is inserted in path. Packet captures show arrivals at the appliance but not egress toward the app. What is the most likely cause?
• A legacy permitting workstation cannot complete handshakes with a cloud API after the city retired an old TLS and application protocol version on the server. What is the core issue?
• A municipal autoscaling group cannot attach new NICs because the subnet reports no free addresses. What problem does this describe?
• A city peers its VPC to a partner university network, then discovers overlapping CIDR blocks and broken routes between them. What is the fundamental problem?
• Traffic from a county VPC to a remote VPC fails even though a transit gateway attachment exists. Traceroutes show packets never leave the local subnet toward the transit hop. What is most likely missing?
• A private municipal subnet's route table accidentally sends 0.0.0.0/0 to an internet gateway instead of a NAT gateway. What is the primary risk or failure mode?
• A hybrid city VM is isolated from its intended segment after a network change. The hypervisor port is set to access mode on VLAN 20 while the guest expects tagged trunk traffic for VLAN 30. What does this indicate?
• Users report that 'the cloud is down,' but the provider status page is green and traceroute from city edge routers fails before packets reach the provider's network. What should the team conclude?
• After a hardening change disables weak ciphers on a city load balancer, legacy kiosk clients fail the TLS handshake. What security troubleshooting issue does this represent?
• A help-desk role that previously could only reset passwords can suddenly delete production databases in the city's cloud account. What security issue should be investigated?
• Cloud access logs show API calls that delete security groups from an identity that should not have that permission. What is the appropriate troubleshooting focus?
• A developer pastes a municipal cloud access key into a public Git repository. What should the team treat as the primary incident?
• Login failures spike right after the city rotates MFA tokens. Some users show successful second-factor challenges; others never receive prompts. How should ops triage?
• Scanners report a critical CVE on internet-facing container images still serving the city's public portal. What is the required security operations response?
• Cluster monitoring finds an unapproved crypto-miner container running in a municipal Kubernetes namespace. What issue does this represent?
• After a municipal access key leaks, which response set best matches Cloud+ security troubleshooting depth?
• After a least-privilege IAM change, multiple city staff report access denied to the same portal. Some peers in another group still succeed. How should the team troubleshoot authorization?
• A change window disables a weak cipher on the city's API gateway and an old payment integration breaks. Leadership asks how to proceed securely. What is the best approach?